Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: LiSEIm7rCGzWULjYjBYQYcEbG9JnYXygp93aRbXE0Fw=
Subject key identifier: F6:E0:28:72:00:A6:EB:E1:FB:65:3B:4F:E1:73:8D:3D:F5:3D:18:FF
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 01A10700BD8C0C15E6CF30FE16CF23FBB8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 03B3
Signing time: Sun 04 Oct 2026 13:00:51 +0000
Manifest this update: Sun 04 Oct 2026 13:00:51 +0000
Manifest next update: Mon 05 Oct 2026 13:00:51 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: 28Giho+nxsQj4UEtKFjpkh4Zkx+ZntdsWAqEkV0xprs=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:bd:8c:0c:15:e6:cf:30:fe:16:cf:23:fb:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Oct 4 13:00:51 2026 GMT
Not After : Oct 5 13:00:51 2026 GMT
Subject: CN=f6e0287200a6ebe1fb653b4fe1738d3df53d18ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:ff:f1:ec:dc:5b:c9:99:da:d8:6d:3d:21:
cc:ca:ce:7d:5b:7f:34:a1:d9:b5:81:99:93:c4:c6:
b7:1c:fa:ee:b9:cb:36:52:c7:e2:7a:ef:f2:cb:ed:
9e:0d:9d:e1:de:51:ac:7b:68:5e:88:db:c1:0e:7d:
a1:3a:44:71:3d:00:dc:50:3f:e5:35:bb:8e:d2:8b:
79:a6:c7:a9:26:81:0f:0c:7f:2c:b7:eb:ba:b9:02:
0b:67:d2:42:34:46:7f:f3:a9:fa:12:c2:1d:a5:1a:
ce:7f:8b:12:46:d8:81:2a:9d:0c:cd:cd:2b:dc:92:
8a:38:a5:81:ab:ff:d0:b8:9b:e6:7a:f1:09:c0:35:
25:4a:24:ac:4b:cc:f3:c9:de:9b:17:22:dd:50:40:
ff:b5:fd:36:3c:65:c0:ce:f9:a9:e5:eb:de:92:8f:
c4:bf:49:00:ac:d1:1d:72:14:e9:f2:04:b7:ec:2f:
36:0d:0e:7c:26:18:89:88:82:e2:3c:e1:ae:59:2c:
ec:53:c0:19:47:38:38:bc:d2:3d:fb:e7:1c:7f:d2:
54:be:49:96:ef:50:1c:99:5a:50:66:c5:32:3e:fb:
52:d1:48:d6:04:24:35:05:48:0c:13:45:02:e7:16:
8e:b3:0e:34:a2:a8:ff:57:d5:61:0b:10:08:c5:7d:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E0:28:72:00:A6:EB:E1:FB:65:3B:4F:E1:73:8D:3D:F5:3D:18:FF
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f8:38:73:3f:50:12:92:1c:f3:d0:ed:17:2d:b9:81:57:74:
2b:e9:57:f6:5b:74:83:ad:58:b6:29:26:2e:c3:db:06:8d:28:
6b:4d:ab:18:1f:73:62:cf:60:05:f2:7e:fc:2a:c7:ee:ef:fb:
80:3d:1c:0b:28:76:db:63:57:07:1d:48:46:e7:55:db:8e:0a:
02:05:25:1f:ea:d4:ad:de:5d:f1:c4:b6:9e:46:6d:4f:05:8a:
98:d6:c2:5b:ea:6c:73:d8:58:03:d8:f7:7f:e5:7f:c8:52:3e:
35:ba:35:f2:86:8a:cf:55:a0:b4:68:2f:e8:4d:e3:bc:5a:4b:
e1:2f:86:18:81:16:09:7e:6b:af:b3:9a:26:30:d8:12:5f:7d:
fd:30:55:9b:d8:bf:2b:3e:94:25:19:53:f1:2a:a7:dd:a0:3b:
cd:4d:c2:b9:9c:28:f0:7b:db:bc:70:e0:56:e7:ae:8e:7e:67:
db:b8:47:4f:ad:a0:d5:f8:2d:71:d9:86:8b:fd:50:21:5b:6d:
aa:25:95:9b:99:76:9d:fc:0e:53:cb:98:0c:c9:94:7a:c9:ed:
f6:c5:95:af:89:93:1f:36:41:42:10:a9:37:fb:b5:4e:73:bb:
46:ee:65:91:9d:61:6b:ec:1e:ed:77:4c:90:a5:d0:af:2e:bc:
00:94:d4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:10:39 2026 by rpki-client